diff --git a/Directory.Packages.props b/Directory.Packages.props
index 7638c80..6b5087a 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -10,26 +10,26 @@
 	<ItemGroup>
 		<!-- F# runtime — required explicitly on every F# project (lib AND test) under
 		     CPM, because the F# SDK's implicit FSharp.Core reference is dropped. -->
-		<PackageVersion Include="FSharp.Core" Version="10.1.302" />
+		<PackageVersion Include="FSharp.Core" Version="10.1.400" />
 
 		<!-- Production dependencies -->
 		<PackageVersion Include="Markdig" Version="1.3.2" />
-		<PackageVersion Include="LibGit2Sharp" Version="0.31.0" />
+		<PackageVersion Include="LibGit2Sharp" Version="0.32.0" />
 		<!-- DPAPI for the GitHub OAuth token at rest (PoC-5). Windows-only at runtime (throws
 		     PlatformNotSupportedException elsewhere); builds cross-platform, guarded by [Platform] tests. -->
-		<PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
+		<PackageVersion Include="System.Security.Cryptography.ProtectedData" Version="10.0.11" />
 		<PackageVersion Include="Photino.NET" Version="4.0.16" />
 		<!-- Image processing for the paste/drop rule engine (PoC-3). SkiaSharp is MIT-licensed (no
 		     build-time license key, unlike ImageSharp 4.x). The base package carries the Windows and
 		     macOS native binaries; the Linux .so for CI test runs is added on the test project via
 		     SkiaSharp.NativeAssets.Linux.NoDependencies (no fontconfig needed — we never render text). -->
-		<PackageVersion Include="SkiaSharp" Version="4.150.1" />
-		<PackageVersion Include="SkiaSharp.NativeAssets.Linux.NoDependencies" Version="4.150.1" />
+		<PackageVersion Include="SkiaSharp" Version="4.151.1" />
+		<PackageVersion Include="SkiaSharp.NativeAssets.Linux.NoDependencies" Version="4.151.1" />
 
 		<!-- Logging: the Microsoft.Extensions.Logging abstraction backed by Serilog (rolling file).
 		     The Abstractions package is referenced directly by the library projects (e.g. SpecDesk.Ai). -->
-		<PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.10" />
-		<PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.10" />
+		<PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.11" />
+		<PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.11" />
 		<PackageVersion Include="Serilog" Version="4.4.0" />
 		<PackageVersion Include="Serilog.Extensions.Logging" Version="10.0.0" />
 		<PackageVersion Include="Serilog.Sinks.File" Version="7.0.0" />
@@ -38,17 +38,17 @@
 		<!-- AI agent chat (PoC-8): the official Copilot SDK powers the signed-in runtime chat. The
 		     Microsoft Agent Framework packages remain for the provider-neutral/offline adapter tests.
 		     Abstractions is pinned to the Agent Framework's own floor to avoid a CPM conflict. -->
-		<PackageVersion Include="Microsoft.Agents.AI" Version="1.13.0" />
-		<PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.8.0" />
-		<PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.7" />
+		<PackageVersion Include="Microsoft.Agents.AI" Version="1.17.0" />
+		<PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.9.0" />
+		<PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.11" />
 
 		<!-- Test stack -->
-		<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
+		<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
 		<PackageVersion Include="NUnit" Version="4.6.1" />
 		<PackageVersion Include="NUnit3TestAdapter" Version="6.2.0" />
 		<!-- Property-based testing for the F# domain (Toml/Slug/Lifecycle/AstDiff). Dev-only, referenced
 		     from the F# test projects; runs under the existing NUnit runner via Check.QuickThrowOnFailure. -->
-		<PackageVersion Include="FsCheck" Version="3.3.3" />
+		<PackageVersion Include="FsCheck" Version="3.3.4" />
 
 		<!-- Performance harness (bench/). BenchmarkDotNet drives the Markdown reparse + AST-diff
 		     micro-benchmarks on large synthetic documents. Dev/nightly-only: referenced solely by the